Most of the best candidates are not actively looking for a job. They have no open-to-work badge on LinkedIn. They are not responding to InMails. They are not on job boards.
And yet, they are online - publishing code on GitHub, answering questions on Stack Overflow, writing technical articles, speaking at meetups. Their digital footprint is substantial. The problem is that standard recruiting tools were never designed to find them.
That is where X-Ray search comes in. It is one of the most effective and underused sourcing techniques in IT recruiting - and it costs nothing but a few minutes of practice.
What Is X-Ray Search?
X-Ray search is a method of using Google (or other search engines) to search inside a specific website using advanced search operators. Instead of using a platform's own search - which is often limited, paywalled, or algorithmically filtered - you use Google's full indexing power to find profiles, content, and people that a platform's native search would hide.
The term comes from the idea of "seeing through" a website to find what is inside it. You tell Google: search only within this domain, with these keywords, and show me the results. That is it.
The core operator is site: and it looks like this:
site:linkedin.com "software engineer" "Python" "Kyiv" -jobs -recruiter
This single query searches all of LinkedIn for profiles matching those terms - without a LinkedIn Recruiter subscription.
Why X-Ray Search Matters in Tech Recruiting
The tech talent market is competitive. Senior developers, cloud architects, ML engineers, and security specialists receive dozens of recruiter messages every month - and most of them ignore all of them. Standard sourcing through job boards and LinkedIn Recruiter gives you access to the same candidate pool everyone else is competing for.
X-Ray search gives you something different: access to passive candidates who are visible online but not in the recruiting pipeline. It also allows you to bypass platform limitations that are increasingly designed to extract money from recruiters.
Why X-Ray search outperforms standard platform search:
- LinkedIn free accounts are limited to ~100 search results per month
- LinkedIn Recruiter filters out profiles it considers "not open to opportunities"
- GitHub, Stack Overflow, and personal sites have no built-in recruiter tools
- Google indexes content that platform search algorithms deprioritize
- You can combine signals from multiple platforms in a single query
How X-Ray Search Works: The Formula
Every X-Ray search follows the same basic structure:
site:[domain] [role or skill keywords] [location] [exclusions]
Breaking this down:
- site:[domain] - restricts results to a specific website (e.g., site:linkedin.com, site:github.com)
- role or skill keywords - what you are looking for (e.g., "backend engineer" "Go" "Kubernetes")
- location - where the candidate is (e.g., "London" OR "Berlin" OR "remote")
- exclusions - filter out noise (e.g., -jobs -recruiter -"hiring" to remove job postings and recruiter profiles)
The power comes from combining these elements precisely and iterating. A well-built X-Ray search is essentially a reusable sourcing asset.
X-Ray Search Examples by Platform
site:linkedin.com/in "machine learning engineer" ("TensorFlow" OR "PyTorch") "Warsaw" -jobs -recruiter
site:linkedin.com/in "DevOps" "AWS" "Terraform" ("Kyiv" OR "Lviv" OR "remote") -apply
GitHub
site:github.com "rust" "embedded systems" location:"Germany" site:github.com "solidity" "smart contracts" followers:>50
GitHub profiles often reveal more than a resume ever would - real code, contribution history, open source projects, and technical depth.
Stack Overflow
site:stackoverflow.com/users "Clojure" "backend" ("United Kingdom" OR "remote")
Personal Sites and Technical Blogs
Engineers who write about their work are often the most experienced. Find them with:
"senior software engineer" "I built" OR "we built" site:medium.com "Go" OR "Rust" "engineering manager" "how we scaled" site:substack.com
X-Ray Search Templates You Can Use Today
Copy and adapt these templates. Replace placeholders in brackets.
| Role | X-Ray Query |
|---|---|
| Backend Engineer | site:linkedin.com/in "[language]" "backend" "[city]" -recruiter -jobs |
| Frontend / React | site:linkedin.com/in "React" ("TypeScript" OR "Next.js") "[city]" -apply |
| DevOps / SRE | site:linkedin.com/in "DevOps" OR "SRE" "Kubernetes" "AWS" "[location]" |
| ML / AI Engineer | site:github.com "machine learning" "PyTorch" location:"[city]" followers:>30 |
| Security Engineer | site:linkedin.com/in "security engineer" "SIEM" "penetration testing" "[country]" |
| CTO / VP Eng | site:linkedin.com/in "CTO" OR "VP Engineering" "Series B" OR "Series C" "[city]" |
Limitations of X-Ray Search (and How to Work Around Them)
X-Ray search is powerful but not unlimited. Here is what to expect and how to adapt:
- Not all profiles are indexed. LinkedIn has restricted Google indexing for some profiles. Complement with GitHub, Stack Overflow, and personal sites.
- Results depend on profile wording. Try multiple keyword variations: "ML engineer", "machine learning engineer", "AI developer".
- Location accuracy varies. Use multiple location variations and combine with remote work filters.
- Google may throttle search volume. Running too many searches quickly triggers CAPTCHA. Spread searches over time or use Google Search API for volume.
- No direct contact information. X-Ray finds profiles, not emails. Use contact enrichment tools (Apollo, Hunter.io, Lusha) to find contact details after identifying candidates.
X-Ray Search vs. LinkedIn Recruiter: When to Use What
The most effective recruiting teams use both. X-Ray search excels at finding highly specific, niche, or passive candidates - especially in markets where LinkedIn Recruiter yields the same pool as your competitors.
| Factor | X-Ray Search | LinkedIn Recruiter |
|---|---|---|
| Cost | Free | $800–$1,200/mo |
| Profile coverage | Indexed public profiles | Full LinkedIn database |
| Cross-platform search | Yes (any site) | LinkedIn only |
| Contact info | No (needs enrichment tool) | InMail included |
| Volume / scale | Manual, limited by CAPTCHA | Bulk outreach tools |
| Best for | Niche, passive, multi-platform | High-volume standard roles |
The EvoTalents Approach: X-Ray at Scale
At EvoTalents, an IT Recruitment Agency specializing in tech hiring, X-Ray search is one of several sourcing layers in our Talent Intelligence stack. We combine it with competitor talent mapping, alumni tracking, GitHub signal analysis, and conference speaker lists to build candidate pools that no job board or standard ATS can replicate.
The result: we consistently source senior engineers, architects, and tech leaders who were not actively looking - and were not visible through conventional search.
If your current sourcing process relies primarily on inbound applications and LinkedIn InMail, you are competing for the same 20% of the market that everyone else is fighting over. The other 80% is findable - it just requires a different approach.
Want to see what X-Ray search can find in your target market?
Book a free consultation with EvoTalents' Founder Elena Volk
During this call, we:
- Will take a look on your recruiting processes,
- Will share ideas for improvement,
- Will tell you how we work in partnership with our clients.
You will gain a clear understanding of how collaborating with a recruiting partner can be your competitive advantage.
Book a call and learn more today! [link]